Release date:
2026-08-04 12:37:28 UTC
Description:
- CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour)
- CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite)
- CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification
- CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification
- CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread
Updated packages:
-
gnutls-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:acfe7403bd0a289f9618a48b66c86cac4fa9f3462e0faf3faf5519eba2626eb9
-
gnutls-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:ba5a3dbb6dd25ad293c49fa99f6f4e574751a45d55b8228d229317e33bfd8c00
-
gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:e9ffa46014296cc7f949ae629c391f43e8a3e2865a6c87968bb4d7ac32ea835d
-
gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:db9c61187978916e6a8923502ddb7fd51f23f30a1e96f2fc735b4633e70bf9dd
-
gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:de2d5378d22896baf48cbb3c4d21f135691a64021cfd941808881f11b2b0f660
-
gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:b6d941456ec20c2c4b057fc23a1db131e8a9877563fe2907eb307a5f48d4c3b5
-
gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.i686.rpm
sha:3ca6b6976fc5ae902dd675a692f2bbcac6c4b4e0469b3d0334cf6767d52d69b9
-
gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:044b4e3ddc4a11ed89e9aa74e06d2f937f499c00062b0b086d94b93361ab2c90
-
gnutls-utils-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm
sha:432b69fafc54a94235b19a0bc8d48ee467c2d7acd8b5b6d3a4608743dc54fff3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
